Data Source: awsEbsDefaultKmsKey
Use this data source to get the default EBS encryption KMS key in the current region.
Example Usage
/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const dataAwsEbsDefaultKmsKeyCurrent =
new aws.dataAwsEbsDefaultKmsKey.DataAwsEbsDefaultKmsKey(this, "current", {});
new aws.ebsVolume.EbsVolume(this, "example", {
availabilityZone: "us-west-2a",
encrypted: true,
kmsKeyId: dataAwsEbsDefaultKmsKeyCurrent.keyArn,
});
Attributes Reference
The following attributes are exported:
keyArn
- ARN of the default KMS key uses to encrypt an EBS volume in this region when no key is specified in an API call that creates the volume and encryption by default is enabled.id
- Region of the default KMS Key.
Timeouts
read
- (Default20M
)